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REMARKS 

Reconsideration of the present application is requested. 
Applicants acknowledge the withdrawal of claims 5, 8-10, 12-13 and 33- 
40. Claims l-fe, 6-7. 14 and 22-32 are currently under examination. 



Objections to 



Office 



The 
"computer- 
antecedent 
objection bein 
See, MPEP § 
medium" need 
specification, 
application, 
medium" in 
For at least 



readable 



basis 



ths 



Claim Objectio ns 



the Specification 



2163. 



Action includes an objection to the specification because 
storage medium" in claims 14 and 23 allegedly lacks 
in the specification. Applicants fell to understand this 
that there is no in haec verba requirement for the specification. 

Hiat is. an explicit recitation of "computer-readable storage 
not be set forth in the specification. Throughout the 
1 he term "storage medium" is used- In the context of the present 
of ordinary skill would surely appreciate that "storage 
specification is indeed a "computer-readable storage medium." 
reason, withdrawal of this objection is requested. 



or ile 



the 



Claims 11-2, 6-7. 14 and 32 stand objected to due to minor informalities. 
Although Applicants do not necessarily agree with each of the Examiner's 
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Applicants have amended the claims where necessary taking into 
Ej&miner's comments. Withdrawal of this objection is requested. 



Rejections under 35 U*SX« § 101 



Claims 
as being 
necessarily 
claim 1 taking 
recites 



directed 



agree 



performin g, by a security check device, a security check to 



ascertain 
with stored 



Thus, claim 1 
check device aiid/or 
manner similai 



-2, 6-7, 14, 22-30 and 32 stand rejected under 35 U.S.C. § 101 
to nonstatutory subject matter. Although Applicants do not 
with the Examiner's rejection, Applicants have amended 
nto account the Examiner's comments. As amended, claim 1 



a user identity by comparing entered identity information 
user identity data; (...] 



perform! ji g, by at least one processor, at least one of encrypting 
and decrypting data using the acquired at least one data key and 
inhibiting user recognition of the acquired at least one data key. 



s positively tied to a particular machine; namely a security 

at least one processor. Claim 22 has been amended in a 
to claim 1. Therefore, withdrawal of this rejection is requested. 
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Rejections milder 35 U.S.C, § 1Q3 



card generates 



Claims |, 2, 6, 7, 14, and 22-32 stand rejected under 35 U.S.C, § 103(a) 
as allegedly unpatentable over U.S. Patent No. 6,031 ,910 ("Deindl") in view of 
U.S. Patent No. 7,272,230 ("Sasaki"). This rejection is respectfully traversed.* 

Deindl c iscloses a method for storing information on at least one storage 
medium with he aid of a chip card. According to column 6. lines 22-43, a chip 

a first cryptographic key, which is transmitted to a computer. 
Using the transmitted first cryptographic key, the computer encrypts data to be 
stored on the storage medium. Within the chip card, the transmitted first 
cryptographic key is encrypted with a second cryptographic key, which is not 
provided to tht computer. Both the encrypted data and the encrypted key are 
stored on the storage medium. 

At page 7, the Office Action directs Applicants' attention to the "personal 
identification number, a password and/or biometric identification - e.g. col. 6, 
lines 37-39" of Deindl to disclose the claimed "user identifier." Contrary to 
claim 1, however, these forms of identification are entered by the user, not 
stored in a first! data store as is the case with the "user identifier" of claim 1 . 



1 To be thorough, 
discussions of eac h 
references Individually, 



render the claimed 
art. 



further expedite prosecution, and for the sake of clarity. Applicants provide 
h ° f ^ references separately, however. Applicants are not attacking these 
], but arguing that the references, even taken in combination, fail to 



invention obvious because all features of claim 1 are not found in the prior 
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Further, Deincil does not disclose or fairly suggest any associating of these 
identifications with a user identity. 

As the Examiner will appreciate, claim 1 requires both a "user identity" 
and a "user identifier" as well as associating the two together. The user 
identity is ascertained by comparing entered identity information with stored 
user identity dxta. The ascertained user identity is then associated with a user 
identifier stored in a first data store. At best, the personal identification 
number, password and/or biometric identification mentioned in Deindl are 
identity infordation entered by a user, but not a "user identity" or "user 
identifier." 

Therefore Deindl fails to disclose or fairly suggest at least "associating 
the user identity with a user identifier stored in a jfirst data store" as required by 
claim 1. 

Further, at page 7, the Office Action directs Applicants 1 attention to 
column 6 f line* 22-23 and 44-56 to disclose 'associating the user identifier with 
at least one usirr group identifier' 1 as required by claim 1 , Applicants disagree 
does not disclose or fairly suggest actively associating a user 
identifier with it least one user group identifier stored in a second data store.. 

Specifica ly, at column 6, lines 22-23 Deindl merely discloses that a user 
is assigned to a| group. Further, at column 6, lines 44-56, Deindl states in- 
part: 



because Deind] 
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In an embodiment, the method further includes the step of 
producing a data header in the computer for each of a plurality of 
data records, where the data header indicates to which of a 
plurality of user groups a particular user that is writing belongs 
to 

Neither portion! of Deindl, however, discloses a second data store in which a 
user group identifier is stored. Further, neither portion of Deindl discloses an 
active association between the user identifier and user group identifier. At 
best lines 44-56 in column 6 of Deindl disclose generating a data header, 
which identifies the user group to which the particular user belongs. 
Therefore, Deliidl also fails to disclose or suggest "associating the user identifier 
with at least o^e user group identifier stored in a second data store" as required 
by claim 1. 

Moving forward, as correctly recognized by the Examiner, Deindl does 
not disclose or fairly suggest at least a centralized third date store including all 
The Office Action, at pages 7 and 8 directs Applicants' attention 
to Sasaki to disclose this feature. Particularly, the Office Action refers to the 
second management database 16 in FIG. 31 of Sasaki to disclose the 
centralized third data store of claim 1, 

Sasaki d scloses an encryption system and method, FIG. 31 of Sasaki 
shows a seconc management database 16. The second management database 
16 includes a group key and a group ED. The group ID identifies the group to 
the cryptographic system belongs. The group key is a random 



which a user of 



PAGE 16/18 * RCVD AT 6/17/2009 7:25:35 PM (Eastern Daylight Time] * SVR:USPTO-EFXRF-6/31 * DNIS:2738300 1 CSID:703 668 8200 * DURATION (mm-ss):0242 



Best Available Copy 

JUN- 17-2009 19:22 HDP 



703 668 8200 P. 017 



number data 



deficiencies 



suggest 



same 

disclose or 
stored in a ftrs\ 
user group identifier 
Because neither 



addition 
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render claim 1 
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of which stored 
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Sasaki for at 
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this rejection 
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^iven for each of the groups. But, Sasaki suffers from at least the 
as Deindl with respect to claim 1. Namely, Sasaki fails to 
at least "associating the user identity with a user identifier 
data store 11 and "associating the user identifier with at least one 
stored in a second data store" 

Deindl nor Sasaki discloses or suggests the associating 
:>y claim 1, Deindl in view of Sasaki (assuming arguendo that 
could be combined, which Applicants do not admit) fails to 
obvious. 

amended claim 1 requires, inter alia, three data stores, a first 
a user identifier, a second of which stores a group identifier and 
a stores data keys. Neither Deindl nor Sasaki, taken singly or in 
qiscloses such a modular structure. Therefore, the references fail 
1 obvious. 

and 31 recite at least some features similar to those set forth 
, claims 22 and 31 are patentable over Deindl in view of 
somewhat similar reasons, 
view of Sasaki fails to render claims 2, 6, 7, 14, and 23-30 and 
lfeast by virtue of their dependency from claim 1. Withdrawal of 
requested. 



22 



Therefore, 



least 
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CONCLUSION 

In view <|>f above remarks, reconsideration of the outstanding rejection 

of the pending claims is respectfully requested. 
If the Ex aminer believes that personal communication will expedite 
prosecution of this application, the Examiner is invited to telephone Andrew M. 
No. 56,007, at the number listed below. 
If necessary, the Commissioner is hereby authorized In this, concurrent, 
and future replies to charge payment or credit any overpayment to Deposit 
Account No. 08-0750 for any additional fees required under 37 C.F.R. §§1.16 
or 1.17; particularly, extension of time fees. 

Respectfully submitted, 
HARNESS, DICKEY & PIERCE, PLC 



Waxman, Reg. 



DJD/AMW:clc 





Donald J. Daley 
Reg. No. 35,313 

P.O. Box 8910 
Reston. VA 20195 
(703) 668-8000 
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